Replace or Improve Cognito

[jermnelson]

Currently Sinopia uses AWS Cognito for user authentication, access, and management. While Cognito has proved usable, we may need a more general user management approach in order to support user-based customization and other authentication methods like LDAP or Shibboleth. Any replacement must support the creation of JSON Web Tokens (JWT).

Given the time constraints for the 2020 Q3 work-cycle, revisiting and investigating how we improve the use of Cognito within Sinopia may be the best option instead of a full-replacement of Cognito in the Sinopia stack.

[jermnelson]

Possible alternatives to Cognito:

• Passport.js
• You don't need passport.js - Guide to node.js authentication more of rolling your own in node.js.

[michelleif]

closing in favor of #2901